110 lines
		
	
	
		
			2.5 KiB
		
	
	
	
		
			Bash
		
	
	
			
		
		
	
	
			110 lines
		
	
	
		
			2.5 KiB
		
	
	
	
		
			Bash
		
	
	
#!/usr/bin/env bats
 | 
						|
 | 
						|
# Registry host name, should be set to non-localhost address and match
 | 
						|
# DNS name in nginx/ssl certificates and what is installed in /etc/docker/cert.d
 | 
						|
 | 
						|
load helpers
 | 
						|
 | 
						|
hostname="localregistry"
 | 
						|
base="hello-world"
 | 
						|
image="${base}:latest"
 | 
						|
 | 
						|
# Login information, should match values in nginx/test.passwd
 | 
						|
user=${TEST_USER:-"testuser"}
 | 
						|
password=${TEST_PASSWORD:-"passpassword"}
 | 
						|
email="distribution@docker.com"
 | 
						|
 | 
						|
function setup() {
 | 
						|
	tempImage $image
 | 
						|
}
 | 
						|
 | 
						|
@test "Test valid certificates" {
 | 
						|
	docker_t tag -f $image $hostname:5440/$image
 | 
						|
	run docker_t push $hostname:5440/$image
 | 
						|
	[ "$status" -eq 0 ]
 | 
						|
	has_digest "$output"
 | 
						|
}
 | 
						|
 | 
						|
@test "Test basic auth" {
 | 
						|
	basic_auth_version_check
 | 
						|
	login $hostname:5441
 | 
						|
	docker_t tag -f $image $hostname:5441/$image
 | 
						|
	run docker_t push $hostname:5441/$image
 | 
						|
	[ "$status" -eq 0 ]
 | 
						|
	has_digest "$output"
 | 
						|
}
 | 
						|
 | 
						|
@test "Test basic auth with build" {
 | 
						|
	basic_auth_version_check
 | 
						|
	login $hostname:5441
 | 
						|
 | 
						|
	image1=$hostname:5441/$image-build
 | 
						|
	image2=$hostname:5441/$image-build-2
 | 
						|
 | 
						|
	tempImage $image1
 | 
						|
 | 
						|
	run docker_t push $image1
 | 
						|
	[ "$status" -eq 0 ]
 | 
						|
	has_digest "$output"
 | 
						|
 | 
						|
	docker_t rmi $image1
 | 
						|
 | 
						|
	run build $image2 $image1
 | 
						|
	echo $output
 | 
						|
	[ "$status" -eq 0 ]
 | 
						|
 | 
						|
	run docker_t push $image2
 | 
						|
	echo $output
 | 
						|
	[ "$status" -eq 0 ]
 | 
						|
	has_digest "$output"
 | 
						|
}
 | 
						|
 | 
						|
@test "Test TLS client auth" {
 | 
						|
	docker_t tag -f $image $hostname:5442/$image
 | 
						|
	run docker_t push $hostname:5442/$image
 | 
						|
	[ "$status" -eq 0 ]
 | 
						|
	has_digest "$output"
 | 
						|
}
 | 
						|
 | 
						|
@test "Test TLS client with invalid certificate authority fails" {
 | 
						|
	docker_t tag -f $image $hostname:5443/$image
 | 
						|
	run docker_t push $hostname:5443/$image
 | 
						|
	[ "$status" -ne 0 ]
 | 
						|
}
 | 
						|
 | 
						|
@test "Test basic auth with TLS client auth" {
 | 
						|
	basic_auth_version_check
 | 
						|
	login $hostname:5444
 | 
						|
	docker_t tag -f $image $hostname:5444/$image
 | 
						|
	run docker_t push $hostname:5444/$image
 | 
						|
	[ "$status" -eq 0 ]
 | 
						|
	has_digest "$output"
 | 
						|
}
 | 
						|
 | 
						|
@test "Test unknown certificate authority fails" {
 | 
						|
	docker_t tag -f $image $hostname:5445/$image
 | 
						|
	run docker_t push $hostname:5445/$image
 | 
						|
	[ "$status" -ne 0 ]
 | 
						|
}
 | 
						|
 | 
						|
@test "Test basic auth with unknown certificate authority fails" {
 | 
						|
	run login $hostname:5446
 | 
						|
	[ "$status" -ne 0 ]
 | 
						|
	docker_t tag -f $image $hostname:5446/$image
 | 
						|
	run docker_t push $hostname:5446/$image
 | 
						|
	[ "$status" -ne 0 ]
 | 
						|
}
 | 
						|
 | 
						|
@test "Test TLS client auth to server with unknown certificate authority fails" {
 | 
						|
	docker_t tag -f $image $hostname:5447/$image
 | 
						|
	run docker_t push $hostname:5447/$image
 | 
						|
	[ "$status" -ne 0 ]
 | 
						|
}
 | 
						|
 | 
						|
@test "Test failure to connect to server fails to fallback to SSLv3" {
 | 
						|
	docker_t tag -f $image $hostname:5448/$image
 | 
						|
	run docker_t push $hostname:5448/$image
 | 
						|
	[ "$status" -ne 0 ]
 | 
						|
}
 | 
						|
 |